An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. Direct dereference of a NULL pointer (a variable initialized to NULL) leads to a crash when validating the certificate of a client connecting to the server in a TLS client/server mutual-authentication setup.
References
Link | Resource |
---|---|
https://github.com/proftpd/proftpd/issues/858 | Third Party Advisory |
Configurations
Information
Published : 2019-11-25 20:15
Updated : 2019-12-11 08:16
NVD link : CVE-2019-19272
Mitre link : CVE-2019-19272
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
proftpd
- proftpd